Add support for patch to vault_policy_document

CHANGELOG.md

@@ -1,3 +1,8 @@
+## 3.1.0 (Unreleased)
+
+IMPROVEMENTS:
+* `data/policy_document`: Add support for `patch` capability for vault-1.9+. ([#1238](https://github.com/hashicorp/terraform-provider-vault/pull/1238))
+
 ## 3.0.1 (November 23, 2021)
 
 BUGS:

vault/data_source_policy_document.go

@@ -27,7 +27,16 @@ type PolicyRule struct {
 	DeniedParameters   map[string][]string
 }
 
-var allowedCapabilities = []string{"create", "read", "update", "delete", "list", "sudo", "deny"}
+var allowedCapabilities = []string{
+	"create",
+	"read",
+	"update",
+	"delete",
+	"list",
+	"sudo",
+	"deny",
+	"patch",
+}
 
 func policyDocumentDataSource() *schema.Resource {
 	return &schema.Resource{
@@ -136,7 +145,7 @@ func policyDocumentDataSourceRead(d *schema.ResourceData, meta interface{}) erro
 	policy := &Policy{}
 
 	if rawRules, hasRawRules := d.GetOk("rule"); hasRawRules {
-		var rawRuleIntfs = rawRules.([]interface{})
+		rawRuleIntfs := rawRules.([]interface{})
 		rules := make([]*PolicyRule, len(rawRuleIntfs))
 
 		for i, ruleI := range rawRuleIntfs {

vault/data_source_policy_document_test.go

@@ -19,14 +19,13 @@ func TestDataSourcePolicyDocument(t *testing.T) {
 			},
 		},
 	})
-
 }
 
 var testDataSourcePolicyDocument_config = `
 data "vault_policy_document" "test" {
   rule {
     path                = "secret/test1/*"
-    capabilities        = ["create", "read", "update", "delete", "list"]
+    capabilities        = ["create", "read", "update", "delete", "list", "patch"]
     description         = "test rule 1"
     required_parameters = ["test_param1"]
 
@@ -86,7 +85,7 @@ data "vault_policy_document" "test" {
 
 var testResultPolicyHCLDocument = `# test rule 1
 path "secret/test1/*" {
-  capabilities = ["create", "read", "update", "delete", "list"]
+  capabilities = ["create", "read", "update", "delete", "list", "patch"]
   required_parameters = ["test_param1"]
   allowed_parameters = {
     "eggs" = ["foo", "bar"]